Re: email alerts

["Petriz, Pablo" <ppetriz () siscat com ar>]

Hello Erek

A little bit out of Snort scope: i'm using swatch to mail the alerts too,
but the throttle option is not working and i saw you are using it in your
script!

> [2]   http://www.theadamsfamily.net/~erek/snort/snort-swatch.conf
 
I've tried to use it the same way but it fails when hit the line

perlcode my
$timestamp_regex="^[A-Z][a-z]{2}\s+\d{1,2}\s+\d{1,2}:\d{1,2}:\d{1,2}\s+";

Is this part of the swatch_conf file or i have to put it somewhere else?

Thank you for your help!


PABLO




-------------------------------------------------------
This SF.net email is sponsored by: Etnus, makers of TotalView, The debugger 
for complex code. Debugging C/C++ programs can leave you feeling lost and 
disoriented. TotalView can help you find your way. Available on major UNIX 
and Linux platforms. Try it free. www.etnus.com
_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users